CVE-2020-3327

The CVE-2020-3327 issue affects ClamAV’s ARJ archive-parsing module and is caused by an out-of-bounds read in the ARJ parser that could trigger a denial of service. Advisories confirm a fix was released in ClamAV 0.102.3 (with subsequent updates addressing the issue in later releases, e.g., 0.102...

CVE-2020-3341

CVE-2020-3341 affects ClamAV (versions 0.101–0.102.2) where the PDF archive parsing module is vulnerable to a stack buffer overflow read. An unauthenticated, remote attacker could exploit a crafted PDF file to crash the ClamAV scanning process, causing a DoS. Public advisories in connected docs c...

CVE-2020-3350

CVE-2020-3350 concerns ClamAV (and is referenced in the Cisco/AMP context in the initial doc). A vulnerability allowed a malicious user to trick clamscan, clamdscan or clamonacc into deleting or moving a different file than intended when using the --move or --remove options. The underlying issue ...